CVE-2008-0666

LOW 3.6CVE-2008-0666 · Published 11/02/2008 · updated 16/06/2026

In short

CVE-2008-0666 is a LOW (CVSS 3.6) vulnerability affecting website meta language (website meta language).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
website meta language website_meta_language	`= 2.0.11`	No fix yet

Description

Website META Language (WML) 2.0.11 allows local users to overwrite arbitrary files via a symlink attack on (1) the /tmp/pe.tmp.$$ temporary file used by wml_contrib/wmg.cgi and (2) temporary files used by wml_backend/p3_eperl/eperl_sys.c.

References

bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
secunia.com/advisories/28829
secunia.com/advisories/28856 · Vendor Advisory
secunia.com/advisories/29353
security.gentoo.org/glsa/glsa-200803-23.xml
debian.org/security/2008/dsa-1492
mandriva.com/security/advisories
securityfocus.com/bid/27685

More vulnerabilities in website meta language

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free